Maybe I can just auth with a random account on outbox relays. That will make them work without revealing the main user.

Auth with the main account on trusted relays, random ones for everyone else.

I will test tomorrow.