[mschuster91]

You don't need a private client key for just encryption, the public key of the recipient is sufficient.

For signing, you'd need a pub/priv keypair, but this is not implemented here.