Really curious about this, how would you setup this to be UX friendly?

Where are the user controlled keys are going to reside? I suppose there will need to be a user controlled active signer somewhere no?