A bit like Keybase, would it be reasonable for peers to update their own public keys on remote peers? This carries potential risks, but also, if the private key has been compromised you can't trust it anyway.