Pass must-spend inputs to users by ownership