Can TALUS's threshold ML-DSA hide the key? This note says Feldman commitments and signature broadcasts leak it anyway.