And the NodeKey thing is implemented in your PR, and is easy to reason about the safety of, but is a separate mechanism from everything else