Include confirmations for each input in TxToJSON to detect potential
double-spend attacks.
clarify comment