Any suggestions as to how to choose a safe nostr client? How do you know that the client isn’t collecting private keys?