Is the concept of hierarchical deterministic npubs a valid idea? Someone could use a single key to sign for 1-n keys that all roll up to the parent?