Yup, only encrypt content with epoch key. Expose all metadata to relay. Group key manages (and can presign) epochs. I'm testing that.