The Case for Browser Provenance