nice! That's a pretty clever UX solution. The reason i think that's not the long term fix is because it still means that every single app or client i test or even play with has the master key to destroy my entire network. If workstr is malicious, doesn't matter how safe the transfer is, I'm done.
Love the approach, but the master key transfer problem still has another painful layer that I think needs a more robust, long term solution.
