Yeah, I think we need multiple services that allow users to sign in to web services where the individual events are sent from the front end app back to a signing server that holds the nsec and sign events the app requests.