How is it possible to have something that both proves something about your identity but also does not allow ANYONE to deanonymize you?