Individual risk and intergenerational risk sharing in an investment-based social security system