rubber-hose resistant authentication