relays should have pubkeys, then you could do fun things like skipping dns and tls, just use noise protocol (Noise_XK_secp256k1_ChaChaPoly_SHA256) and ip. You could also p-tag relay pubkeys for relay specific notes. may nip this.