[jopsen]

> Non-resident keys will basically give out the private key encrypted...

I thought U2F took a random string from the caller and derived the private key that..