2017-11-29 UTC
# 
saranix cwebber2: they need to take care that they don't lose access to their only access to their private key, that's not a technical problem. You can prevent ahead of time by always publishing a second public key (a mangement key if you will) to which the service provider does not have the private