If lightning payments are not on-chain, how do you prevent the double-spend problem? Wouldn’t you still depend on a trusted third party?