Achieving Trust without Disclosure: Dark Pools and a Role for Secrecy-Preserving Verification