As to what happens when keys get compromised:

The reason i basically dont awnser is because its is a complicated clusterfuck. My proposal would be to self publish your privatekey, and thereby put a lot of pressure on relays to start blocking your stuff. But you can imagine a million things.

But all if it involves crying to one degree or another.