How about creating 2 nsecs:

1) your normal one

2) your super secret one

Post from 1 that you authorize 2 and only 2 to post your new npub if 1 gets compromised and ask people to follow 2