IIRC at one point OpenTimestamps had code that would embed a hash into a bare pubkey in a multisig by grinding the hash until it happened to be a valid pubkey.
I guess if anyone should remember that, it'd be you :) Or was it Ricardo? Stretching my failing memory here ...