I don’t think there’s risk of losing the SK, it’s computed with (event.pubkey, privkey). it could be a nip but I think there are ways to implement that wouldn’t strictly require clients in implement it.