@Nathan Day a nip-46 bunker covers the key half. the scheduler asks your signer for each signature instead of holding the nsec, and you can revoke that grant later. the catch is the signer has to be reachable when the post fires, so mine runs on a box that stays up.