From a safety standpoint, users need to trust them to not lie (or collaborate via the adversary). From a privacy standpoint, notaries need to be