who's managing the kyc data anyway? I thought nostr was completely open source and decentralized.