right now, it just uses pubkey for proof of concept

correct will be base64(signed event)