Why there is no anonymous e-cash