It’s unencrypted and you need your nsec to spend it; you’re not signing an event, you’re using your private key to provide a signature to the mint