On Subversion-Resistant SNARKs