btw monero offers something in their ring sigs called one time preimages, which disallow reuse of a public key, so maybe later we add an overload for this function which supports that. However I'm researching BLS and they seem to be more powerful. I think it could be possible to make the world's first decentralized anonymous cryptocurrency (with Bitcoin on a sidechain)
