you can make a sign a note specifying another public key to trust in case of a compromise