Reject additional authorities for lite accounts [#3607]

Closes #3607 (closed). Rejects a transaction that requires additional authorities if the signer is a lite identity. Tweaks !1072 (merged).

Changelog: fix