What On-Chain Randomness Can, and Can’t Do for Fair Lotteries