Survivor bond models for securitizing longevity risk