How can I know if its safe to put my npub into a #nostr client? How do we know for sure if one is malicious or not?