what was it i just said the other day (might have even been yesterday or this morning) about client devs believing this superstition about authing doxxing user's npubs?
1. you can generate a random nsec for each auth if the relay doesn't have "paid" in the nip-11
2. the REQ envelopes constantly doxx the user's npub it doesn't take a data scientist to write an algorithm that can establish the likely npub behind a set of requests from an IP address