Which option is a mechanism to ensure non-repudiation?