I'm varying the limit depending on whether I'm actively monitoring the server or not. I've been whitelisting individual accounts if I see them trying to withdraw or if they reach out and ask.

Yes multiple NWC secrets is something I was going to work on this week actually before this issue came up -- hopefully will get onto it next week when the dust settles.