Recovering trust and avoiding escalation: an overlooked design goal of social systems