I love this. In your view, how would users go about securely swapping credentials ? PGP over email ?

Thanks! My realistic use case is that I am already speaking to someone who I know and trust, so ideally exchange credentials in person. A preferred out of band secure messanger of choice is probably fine.