Bots, privacy and ‘personhood’ credentials