Confidential Guardian: Cryptographically Prohibiting the Abuse of Model Abstention