Thats a good point, how to attendees of an event store their event in their calendar? Do they just accept it and post it as a reply and their local client scours their "replies" feed for events to add to their calendar?

Can you have certain people have permission to assign events to you without having your private key?