Lotto: validate secret trx is signed by block.signee()