combine: Support for recombining key shares

[dsprenkels]

We should support recombination of key shares. I think there are two options here:

1. Automatically combine key shares if the input shares are too short.
2. Add a --keyshares option which will activate the keyshare restoration.