Could an nsec bunker be used to authorize individual NWC payments rather than authenticating with a fixed token?