1. dont share nsecs

2. any revocation protocol will be similar to delegation protocol (here's a new nsec, use that)

3. imagine "delegate" info in a kind0 tag or other replaceable. any messagess posted by delegates should be shown as if they came from the main

4. revocation is simple, change the tag

there is probably already an nip for this.