whats the best way to secure the nsec?
is a pw manager enough?