If you ever lose your bunker code, if the signers vanish from Earth and it stops working or if it gets stolen by a malware virus you can use your nsec to create a new and invalidate the old one.

Can you please elaborate on this? How is the old one invalidated?