This raises a very interesting issue which I can fix. I could record the User's public key at the time of setting the passkey and simple invalidate that passkey if their hive public key changes. I think that's an important point and I'll look at getting that done.