This is going to be a stupid question but how could relays validate that you should be able to resign?
Discussion
You are just going to sign a piece of content, relays cannot block this (offline) action, they can only validate the final sign against the content.
The "validation" you are referring to can only arise from the web of trust, or from a scheme where the user announces in advance the future npub(s) he will use if the current account get compromised. There are some proposals about this workflow but they are still a work in progress.
Great explanation, thank you!