Anonymous credentials: rate-limit bots and agents without compromising privacy