Provably reasonable systems bring users improved transparency using cryptographic analysis