going that route its more straightforward to have a private relay accept employee submissions that are then resigned and published by the ''main'' keypair (which is done by another employee that has a bunker link to do this). Where the "main" key is controlled by a FROST setup among a group which constitute the owners of the organization. See how all these things can just be stacked in order to fit the usecase and level of delegation/trust?