Well, for bouncer it's sort of similiar like how most server use HTTP AUTH function: Login into the private bouncer and use it alone
i already suggested removing the requirement of the relay tag... i still stand by that idea, there is nothing more than time and signatures that matter for auth, party is not relevant, and this requirement makes it difficult to enable relay proxying but then again you can always run a wireguard connection, just it affects all your network, and then you have fun with cloudflare on a regular basis