Just found this https://github.com/hrantzsch/keychain 

 I guess it's up to each developer, first version will read nsec from env 

 But otherwise show the events to be copied and signed elsewhere