A Practical System for Globally Revoking the Unlinkable Pseudonyms of Unknown Users