What if someone steals your key and proposes a new next-in-line pubkey as their own?