That's the part I'm missing. It's not only about deriving the keys but about a NIP that enables the issuing and revokal flow for a seamless experience of other users.

Is this possible already?