Had a fascinating convo with @npub1c2d9...kxar yesterday about hot keys that can only sign timelock refresh payjoin transactions using the magic of miniscript… how would it detect/ensure errant txns arent being signed?