Generalizing Permissive-Upgrade in Dynamic Information Flow Analysis