Protecting against key-exposure: strongly key-insulated encryption with optimal threshold