How to legitimise total biometric surveillance