I think there are discussions about ways to get multiple pubkeys associated. so in case your current private key gets compromised then you can continue as Fermin with another pubkey and all clients would know that it's you.
Discussion
for your reference https://github.com/nostr-protocol/nips/issues/103