Also feels like client impl shouldn't leverage main nsec for any of it. Maybe just inititalizing a group? But then have client manage ephemeral keys at a client level for individual chats.

Also, have a lot of questions around group admin stuffs. But maybe that's all in the MLS spec I havent read yet...