How do I prevent my nostr app from leaking the private key and what do I do once it has leaked?