#plaza is getting a built-in signer, #signet. anything that touches your key happens in signet's own process, never in the client. when you import a key you already have, the client never sees it. it goes straight into the signer. that's finally true, not just a slogan.