Covert channels in privacy-preserving identification systems