I liked idea of keeping the seed/main keys offline. Only using delegated keys on apps.

Offline will act as a password reset by revoking old delegate and delegating new one.

Also handy for scheduled publishing tools.