Functionaries can be made to stop processing withdraws by an attacker

If you move money into Alpha twice via the same address/nonce, then claim only the first, the functionaries may end up trying to spend the second (as it is in their watch-only wallet) but will refuse to sign the unknown input, stalling their progress.
The fix is rather easy - add such outputs to utxos when they are detected during signing.
