[amtamt]

then why not let them generate the key itself?

[njaremko]

So I can revoke the key if I need to (my understanding is that you need the private key for that)