Comment by vishnumohandas

You could perhaps take a look at Skiff's white paper[1] and see how they solve for this.

[1]: https://www.skiff.org/security