[nekitamo]

>What I'm wondering is whether Twitter is actually protecting the private keys? That's the real tricky part.

They could be using whitebox cryptography.