An update to reset nsec

Other people who've had possession of your nsec can update it too, right?

Unless implemented with gadget association, like fingerprint from your mobile or other gadgets used, but that could be tricky too, if the intruder's gadget has been saved on the system, if it had gadget detection programmed