Nsecbunker lets you manage your private keys through delegated child keys. I am running my bunker on a start-os server. It's a heavy lift currently and not all clients support nsecbunker login flow. More info here: https://www.nobsbitcoin.com/nsecbunker-announced/ 

 Cool, I will try it.
But first I want to change my nsec because it's an old one. I put itin every client possible since 1y. 😂  

 You can try nsec.app, it uses the same protocol as nsecbunker but you don't have to run it on your server - it stores keys in your browser.