disable pasting private keys and allow extension auth - should be easy since its an astral fork and that is already built-in.