4 ms·

Encrypt with an individual key for each user. Throwing away the key is indistinguishable from deletion.