cool! the event is passed clear to the target? No encryption? You must make sure your NWT does not ends in the wrong hands. Handy for client to manage their login once and for all, I see it being particularly useful for paid relays if they implement it.