Design Principles for Low Latency Anonymous Network Systems Secure against Timing Attacks