Exactly! I just don't think we should have much access to nsec's at all in the long term. Remote signing (in many ways) should be priority, that or some type of delegation that makes leaked keys useless. This one key compromises all is a problem.