What a warrant canary actually tells you