* Witness g_d^new and pk_d^new in Orchard as non-identity Pallas points, rather than witnessing   their representations as bit sequences. * Note that ak^P in Orchard cannot be the identity.
* Witness g_d^new and pk_d^new in Orchard as non-identity Pallas points, rather than witnessing
  their representations as bit sequences.
* Note that ak^P in Orchard cannot be the identity.

Signed-off-by: Daira Hopwood <cd7d43d5556a38ce626d53826fddc46adc597539@jacaranda.org>

zcash/zips,zcash/zips,zcash/zips,zcash/zips