Are you planning on supporting authed relays for notifications? If so, we need to figure out a way for the Push service to auth on behalf of the user to pull DMs from the private inbox relay.
I am testing this NIP below. It's similar to a key delegation, but only for AUTH. The user authorizes another key to AUTH on their behalf. https://github.com/nostr-protocol/nips/pull/1148