Nice. So with CRI, one can also gain plausible deniability by routinely publishing old secret keys after rotation. Relays could maybe come up with a way to label suspicious events or reject them outside a certain date range bounds (I think this is NIP-22) but that still wouldn't guarantee that a note came from a given individual who routinely publishes old secret keys.