teor:
Do you consider the following torrc _settings_ too sensitive to publish by relays (without an aggregation scheme)?
- OfflineMasterKey setting (0/1)
- SigningKeyLifetime
- Sandbox (0/1)
Yes, these are directly related to relay security, so if they can be linked to the relay, they should be opt-in.
All fields are opt-in and can be linked to the relay if they are published, but if there are concerns about publishing+collecting that information I can remove these fields.