It, too, may necessarily have secret inputs (including not only inputs whose content is a secret but also inputs whose very existence is secret), so any verification is at some point going to be based on trust that the official doing the verifying isn???t just lying about the whole thing.