Third-party vs. second-party control: disentangling the role of autonomy and reciprocity