If the root public key is used nothing is revealed. The root pubkey could be an N of N of parties to the transaction (e.g. everyone cooperates), or any other c

If the root public key is used nothing is revealed. The root pubkey could be an N of N of parties to the transaction (e.g. everyone cooperates), or any other condition you can express with pubkeys alone. So say that you have a coin that can be spent by 2 of 3 Alice, Bob, Charlie or it can be spent by Alice alone after one year has passed. The A/B/C 2of3 could be made the root, it would look like a single pubkey, and be indistinguishable from a ordinary single key wallet. The timeout+alice condition would only get revealed in the even that Bob or Charlie will cooperate and the timeout gets used.