Keeping it Undercover: Cryptographic Privacy for Withdrawals