Maybe take some input from how Alby handles signing requests and allows denials