We could investigate adding an optional list field allowed_relays in kind 1 so that if set by clients based on user request, then relays will only accept messages if relay url in this list or if allowed_relays key not in event?