Aggregate Risk, Political Constraints and Social Security Design