validate both txin and txout pubkeys as part of valid_checksig()