So, it can be generate a rotate key from the nsec + a passphrase, right? Another point that supports the proposal of @GHOST is that in PGP you can use a more robust algorithm that secp256k1 (Curve25519)