Design tradeoffs for central bank digital currency privacy vs AML compliance in retail payments