Constrained Pseudorandom Functions: Verifiable and Delegatable