Untraceable secret credentials: trust establishment with privacy