Of course! You're right. So, if relies were to verify the accounts npub matches that in the JSON, it should be fine, right?