@i Exactly. If you give it an npub it's read-only (for now - https://gitlab.com/soapbox-pub/ditto/-/blob/develop/src/sign.ts )

You can give an nsec, which you HAVE to do if you want to post with third-party Mastodon apps. But Soapbox will eventually support NIP-07 event signing with Alby, and other clients will be able to do it too if they want to fully support Ditto.