Fast yet Safe: Early-Exiting with Risk Control