pretend im a dumb guy named derek. please explain how i use this new nsec spec? what do i use to encrypt my private key?