The current state of Nostr key management is not good at all. We need PGP-style subkeys. Ideally, the root key would be kept offline and only be used to add or revoke device keys. Support for multiple signature schemes would also facilitate future enhancements, such as a group signature scheme to deter key-level device usage analysis, and quantum-resistant schemes.