yep, that's what i'm in the process of building... i also have already got a failover for auth to use it as a secure CLI via DMs, which is part of where my irritation with the lack of NIP-42 comes from - if no NIP-42, then i have to build out a whole second channel to enable secure administration functions and i just refuse to duplicate things for no reason