Theory Question: Why isn't RSA a 0-knowledge Proof