I was working on that for my proposed nip41, i have to iterate over it again as it can be simplified, but it address how to set a new npub to migrate without revealing it