CanDID Bootstrapping Decentralized Identity from Legacy Providers