At some point in there you need to at least suggest they backup their nsec.