lol. thats pretty nuts. so its creating a priv/pub, the user only ever sees the pubkey and it needs zbd servers to sign?

technically nostr, but certainly an antipattern to have escrowed private keys. Very big corp/gov like.