Efficiency Limitations for Sigma-Protocols for Group Homomorphisms