setOptions({
  setFlags: 3, // Operation.AuthFlags.Required | Operation.AuthFlags.Revocable
  signer: {
    ed25519PublicKey: environment.stellar.stellarMainKey,
    weight: 1,
  },
  lowThreshold: 1,
})

const transaction = new TransactionBuilder(bHMainAccountResponse)
    .addOperation(Operation.changeTrust({
      asset,
    }))
    .addOperation(Operation.allowTrust({
      assetCode: asset.code,
      authorize: true,
      trustor: bHMainKeys.publicKey(), // Secondary account
      source: issuerPublicKey,
    }))
    .addOperation(Operation.payment({
      destination: bHMainKeys.publicKey(),
      asset,
      amount: amount.toString(),
      source: issuerPublicKey,
    }))
    .addOperation(Operation.setOptions({
      masterWeight: 0,
      lowThreshold: 0,
      medThreshold: 0,
      highThreshold: 0,
      clearFlags: 7,
      source: bHDeactivatedKeys.publicKey(), // 3rd account
    }))
    .build()

transaction.sign(bHMainKeys)

const signedTransaction = transaction.toEnvelope().toXDR().toString('base64')