These devices will be given to trusted friends, so we need a way to authenticate the user before revealing the key.
Discussion
Why reveal the key instead of doing the signing on the device itself? I don't think it takes much more than an esp32 to handle signing