How do non-custodial wallets differ from custodial wallets in terms of security and control over private keys?