{"type":"rich","version":"1.0","title":"zach wrote","author_name":"zach (npub1za…m5dy5)","author_url":"https://nostr.now/npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5","provider_name":"njump","provider_url":"https://nostr.now","html":"You totally could replicate the nsecbunker \"google-like\" auth flow on the clients where rather than whitelisting a delegate key, this additional bunker just sends over the encrypted client secret. The important thing is that you aren't trusting a single entity with \u003e= the threshold shares necessary to craft a valid signature. As long as that remains true, you can still safety rotate keys and know that any single malicious entity could not rug you."}