What is there to stop the government from later issuing a request to the service owner/operator, by court order, for a list of those verified and the tokens used to verify them (thus linking the accounts and their data to the individuals and their identities)?