pub fn subtract_from(
    ct: &ElGamalCiphertext,
    amount: u64
) -> Option<ElGamalCiphertext>