i've been working on a thing called "noshtr" which replaces SSH with nostr and i was part way through implementing a noise protocol tunnel for it that uses nostr native - sha256/secp256k1 for MAC and ECDH

as far as using the pc locally, the idea would be to have an enclave that isolates your nsec and then hook that into anything that needs a signer

i don't think it would be useful to go any deeper than that, just to make nostr keys a native auth tool