How Schnorr signatures make Bitcoin more private