Secure identity without secrets