In witness encryption for Bitcoin PIPEs, a UTXO holds funds that can only be unlocked by submitting a valid cryptographic witness proof