val exitKeys: MutableSet<PublicKey>
There must be an ExitCommand signed by these keys to destroy the amount