coinbase consolidation could be made even more efficient by requiring there be only one output; then you don't need a range proof