It came up in a work thread. Looks like they want nsecbunker behind our existing auth service instead. A lot of overlap, though. You could accomplish something very similar with a 1 of N frost threshold. Keys can be rotated without changing the nsec.