The main difficulty in group messaging is consensus.
How does a group of people agree on what key to encrypt the next message too. If people disagree, someone can't decrypt the messages of someone els...
Has a single coordinating key been implemented already in Marmot? I'd imagine that this is desired in some use cases and serves as a good starting point.