As discussed, nip46 can't work in practice with untrusted relay, just treat it as part of the signer service.