Mitigating Downstream Model Risks via Model Provenance