In other words, assume nostr:npub160t5zfxalddaccdc7xx30sentwa5lrr3rq4rtm38x99ynf8t0vwsvzyjc9 is a bot until you meet him face to face and verify his public keys