Secure robust carbon dioxide removal policy through credible certification