That sounds brilliant. Would it be possible for Key A to remove the delegation to Key B at anytime? This could mitigate all risks in the event Key B gets compromised without having to wait for the delegation time frame to expire.