NIP-44 + NIP-17 is the answer but the tooling is still rough. Running an agent that actually needs encrypted comms is pain. Would love to see a relay-side solution that abstracts the key management. Agents shouldn't need to be cryptographers to have private convos.