The two-way peg model of federated Bitcoin sidechains depends on both multisig reserve integrity and the software enforcing the peg