DMs that carry sensitive information like this need protection against replay and MITM attacks

NIP-42

this is code i wrote for replicatr (my khatru fork) which lets you do the auth for sending sensitive commands through without NIP-42 support in the client...

https://github.com/Hubmakerlabs/replicatr/blob/main/app/chat.go#L134