@trwnh @evan @erincandescent do we want to pour even more cement around the instance model? if we at least enable per-user keys (even if only potentially/annoying/complexly) some instances have the option of decentralizing themselves, or at least giving individual users the choice to self-manage at their own risk...