@skaht thinking further about BLS, they offer interesting properties- you can issue a new blinded key or preimage, sign it, then aggregate all the signatures and unblind your new key. We can generate new keys unlinked to the old ones with this method.