@Hyolobrika @mia FEP-c390 describes how to attach public key to user profile in a verifiable way. Clients might use this information to encrypt and decrypt messages.
Admin still can replace your public key with some other key he controls. If we haven't met before and I don't know your real key, I would assume that communication channel is secure. But this attack vector likely exists in other systems too