IIRC at one point OpenTimestamps had code that would embed a hash into a bare pubkey in a multisig by grinding the hash until it happened to be a valid pubkey.