deferred ‘destroy’ functionality on mainnet
allow manually providing pubkeys for multi‐sig (fixes #413)