I'm warming to the idea of Nostr, but I almost wish there were three sets of keys: the main private key (which should never touch anything online and is used to generate the other keys), a client key, and a public key. I don't love that the clients get the private key.