using deterministic onetime keys to support proof-of-transfer, Fix #512