On the Cryptographic Deniability of the Signal Protocol