Gravar-mail: How can the regulator show evidence of (no) risk selection in health insurance markets? Conceptual framework and empirical evidence