Oh shit, hold that. Went back to desktop to see if I could replicate the being timed out with no logout button (which does exist when I'm logged in).
And I clicked on Keys. And I see permissions requests. So there's another step - but it's showing up in my nsecbunker admin. (used to nos2x showing me this stuff, so it kind of makes sense, actually. Maybe I'm being too dense here.)
let's retest, shall we? Like button, sure enough, I get a request in nsecbunker, and the option to always allow singing for type 7, or always allow singing for all types. I like singing, and nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft's typos. I think I would like to have the option to only allow once, like nos2x - but really, for nsecbunker, the idea is allow for always. I think Tokens do this, and I can apply a permissions template to them - another reason maybe to use tokens, just to avoid this clunky UX? So now like button appears to work.
I replied to your release post - and that worked - but I'm sure I pushed the button to only allow type 7. A reply shouldn't be a type 7. Posted a new note, worked, that's a type 1. So the only allow type 7 button in nsecbunker might be actually allowing all. Looking at permissions for the user (users button under Key) - it is showing Sign events of kind: all.
So we are getting somewhere with all of this. Nothing like testing live.