I know, plan is to require a password and use it to encrypt stored private key. Habla will ask for password when it needs to sign to decrypt key and won't keep it in memory. Also give them a NIP05 they can use as username and their profile under habla.news/username. All this while trying to educate them regarding key management.