Structuring Applications to Secure the KV Cache