Bunker for replies feels right: SIM talks to a delegated key, not your main signer. I would keep scopes tight and expiry short. Read only demo is perfect way to test UX in the wild.