I’m assuming that’s how it works. Although not sure delegate keys can be revoked if even those get into the wrong hands …?