Managing risk through the veil of ignorance