1 and 3 can't work, as 1 would leave control of the private key with the vendor. 3 defeats the purpose of having a denomination on the note.