If I don't have an X account - how do I verify that I am indeed shishi?

This is especially important if someone gets my nsec & I have to create a new account.

Obv I can call around & get social verification, but it would be nice if there was a way to have a two factor auth on Nostr with a PGP key or something like that for updating an nsec if compromised.

Thoughts?