Subkeys or delegation would solve this problem more elegantly, but it would require all clients and relays to change.

I'm currently using nip46. Soapbox is a modified Mastodon client, so I could make it work. But for unmodified Mastodon clients, i have to have the user run a separate program that signs the events alongside the client, so they don't have to expose their key to the server.​