Refactor married keychains

* move handling of following keychains into the leading keychain
* move multisig threshold into the leading keychain
Oh, I see.  We still want currentKey API for backwards compat.