ok, to be exact, relays should only accept them from the user who made them, this is an aspect of my crusade to get auth universal

relays can't defend the confidentiality of users without these kinds of filters, DMs and application specific data are in my list of event kinds that my relay considers to be privileged and only gives them out if auth is enabled when the authed user's npub is either present as author or in a `p` tag that designates them as a receiver in the case of DMs