Wait wait wait, I'd have credentials for accessing the enclave, right? The point is to pass on those credentials and not the nsec. Also, if the service provider tries to rug us than we can still see that someone already exported the nsec.