How does the zap counter work? Can't it be manipulated? Can't anyone just broadcast that they've sent a zap to someone without sending it? Or it cryptographically verified somehow?