[notpushkin]

Unless you require them to authenticate using that key (which would obviously require them to have the private key on hand).

[arjvik]

What you are describing is the current status quo