i.e. https://cash.app/.well-known/lnurlp/derekmross used to have nostr enabled and a pubkey added. shortly after it was discovered it was removed.