ideal would be to share pubkey privately. but as this multisig is only precautionary measure and not meant to be foolproof we could move forward as agreed.