Clients will only unblind if there are other blind outputs already in the CJ. That way, the anonset is never of 1.

Clients can verify that the other blind outputs were provided by the same people that provided the inputs.