Forbid per-node paths in multisig change outputs and multisig receive addresses.