Specify requirements on witness key types

[andrewwhitehead]

I think it might be sufficient to specify that the Data Integrity proofs in the witness file must also use a cryptosuite allowed by the specification. We do say to use the same method as the controller uses when signing a log entry. And then the key algorithm used by the did:key would naturally be restricted to keys supported by that set of cryptosuites (currently just Ed25519).