How Should We Insure Longevity Risk in Pensions and Social Security?