Have made a couple of notes to this affect, would be a game changer for account security.
Discussion
💯 This proposal looks promising (see bottom of post).
Could nsubs expire (after say 24hrs) the nroot just updates it over another service simplex etc.. No need for extra computation then?