[tor-dev] design for a Tor router without anonymity compromises