additional input changes: restrict to pay-to-pubkeyhash only & find the sender via largest input by sum