Shielded Bitcoin prevents physical coercion and conceals the on-chain identities of multisig signers