Ya we need a way to associate a new key with the old one without revealing it to the world
I was working on that for my proposed nip41, i have to iterate over it again as it can be simplified, but it address how to set a new npub to migrate without revealing it