From Qualitative to Quantitative Proofs of Security Properties Using First-Order Conditional Logic