Basically, each spreadsheet holds its nsec inside encrypted tags to each editor. If you have editting permission, you can use your nsec to decrypt the sheet's nsec and use it to modify the event. 

Unfortunatelly that also means that once granted, each editor can save the nsec offline and keep it forever. :(