How safe is npub.cash with your nsec? Do you have to input it to use it for lightning address?