Bitcoin's future Schnorr signatures explained