Add an XXX comment and a check to ensure we don't try to sign scripts that are not multi-sig