1. Set a spare pubk B using secret key A

2. In case the secret key A is stolen, use secret B to publish a special event that says "B is now the secret key replacing A"

3. Clients show a warning that A is stolen and B is the new one. Clients update the follows. Relays can't do much..