Something that worries me about Nostr is the fact that someone can grab your private key in some insidious way and then that's the ballgame on your account. Is there a way to modify the protocol so that we can issue and control multiple "secret keys" at some sort of clearinghouse that we can then use for various applications/clients etc, so that we only see the secret key the moment it's created, but then giving us the long term ability to roll or cancel the keys as needed.
@fiatjaf? Granted the account at the clearinghouse could just as easily be hacked but at least it becomes just one single place to organize the user's interface with the Nostr ecosystem.