At arm's distance : how states manage escalation with proxies and denials