Crypto protocols should abandon single-signature authorization for critical smart contract functions