Really the only way to defeat it would be by having all the citizens share their keys openly so no activity was ever guaranteed to belong to the credential owner.