oh damn you're right, you could then make those 1 time use tickets just a handshake token to get into the network for your actual private key