Close the account: identity, keys and every session.

Needs a signed-in session. What survives is the append-only money record under the opaque account id, which names nobody once the identity is gone.