When your a brand (or company) with a Nostr profile, who manages the nsec?

Do you just have to trust the team member with it? Or is there a way to give “editor” access eg?