"How serious are pessimistic proofs about security?" Pessimistic proofs: