Proof-carrying proxy certificates