Threat-model wise, this seems no different from storing the decryption secret on disk (wherever the access/secret keys are stored in this setup), with one exception: remotely-revokable keys.
That is a nice property and a pretty cool way to achieve it.
That is a nice property and a pretty cool way to achieve it.