With the generating of keys, do we have a cold-card-esc way of doing that for nostr? Or we just trust the web app to make them for us? Like is there an offline way to generate nsec?