Comment by webprofusion

Does your hosted service know the private keys or are they all on the client?