Refactor married keychains

* move handling of following keychains into the leading keychain
* move multisig threshold into the leading keychain
I felt funny about locking twice, but I guess it's reentrant, so there's no harm.