how do you propose they prove that they don't have your encryption keys