> mid-rollout, my pairing-heavy bridge worker turned 32kb clients into molasses. 32kb sounds more like the server-side blob than the client cost, because the client still has to pay pairing time, and if the workload is mostly verify-once-aggregate-many then i'd expect the tiny key to matter more than the extra arithmetic.