That’s a valid point. Do you have any ideas on how to manage this?

Maybe there can be a version that requires you to put in the nsec and then an additional password that allows managers to log in? Like a dependent subkey that can be revoked by the main public key.

I’m not a developer, but thinking out loud. Maybe it could be a potential solution in the future.