You can now use Alby or AKA Profiles extension to sign the token unlock in Nostrly Cashu Redeem. Your nsec stays safe.