Refactor married keychains

* move handling of following keychains into the leading keychain
* move multisig threshold into the leading keychain
Better to avoid such circular javadocs, something like:

/** Whether the key chain is vending P2SH addresses to multi-signature outputs */

in case the reader is not familiar with our usage of the term "married".