How are users protected from malicious exit nodes, assuming they're visiting sites unprotected by SSL?