OK, so from an EC private key you can derive a payment address (I believe that's the correct term) and a Hash160 version of the private key. So given the private key I can see how the watch-address call works. But bx doesn't have that, it merely has a payment address. And going from one hash to the other is not possible. Or so I thought.