Trustworthy medical AI systems need to know when they don’t know