should probably create a new main key and store that offline

and re-create then one that I used for sourcehut to a subkey of that one

and use a keyfile that is unlocked with a password I type in and then stored in cache somewhere

security…>..>>…