Or actually just incorporate pgp as the "multi sig." A pgp signed message posted to the original npub proving the new npub.