How should Ethereum EOAs be used inside our dApp? I imagine that we should allow users and author to use their existing Ethereum accounts, but in Web3j that requires them to provide their wallet's private key + password, and that is potentially a big security flaw. Can we provide endusers with new EOAs, i.e. generated for them when they register to COBrA?