Work out how to handle multiple reports from the same relay in PrivCount
What do we do in PrivCount if the same relay reports twice?
This can happen if:
- multiple relays share the same keys, or
- a relay forgets that it has reported, so it reports again
We need a way for the tally reporters to check if they have consistent data from each relay.
We could do a validation round, where we check that ZeroCount is 0, and RelayCount is 1. These values are constants, so the validation round has no privacy implications.