Why ‘Setup’ Matters for Cryptocurrency Privacy