Thank you for that, I had a quick peruse, it might be something we can use, although I get the feeling it is more a matter of handling trust when creating the accounts. Part of the reason I delegate to the liketu account instead of powering up the account is to let it claim the DACTs without leaving a significant amount of exposure of risk to it in the event of security leaks (though we don't actually have any system in place for using active keys for creating accounts yet)