It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request.