imo the SP address should be decoupled completely from the identity key and only announced via nostr. As built here it's derived from the npub. so it's still deterministic and computable from the npub by anyone, which is the nasty property of doxxcoin. And then it leans on the nsec for the sweep, exposing it to shell history etc. let me know if I'm missing something. I eat crayons.