nostr:npub1t8rvt8pwj4el0p7zav09f5fzmg07837z486qr8vpgc5h4608dd6q2wrvnw well, in your system if te actor wasn't signed, I could mitm a server, add a new key to a copy of your actor object, and suddenly get that new key federated out.