How a major public hospital is protecting itself by silencing patients who allege harm