How do you know the pool doesn't make up hash under their control?