Wow, you've got a signer with mlock-ed memory here as well. This is awesome! I'm curious, have you considered using `memfd_secret`?

Gitea on NOSTR

n_signer

nsigner is a single statically-linked program that holds signing key material in locked memory and signs on request.