Why does Primal require an nsec on web and mobile? I thought that was bad practice. Am I missing something? Is there some way to give it an npub and authorize write access with something like Amber?