Aggregate Signatures

The signatures used in a transaction can be combined into an aggregate multisignature, along the lines of https://eprint.iacr.org/2018/068 . This works for Sapling spend authorization and binding signatures.