[duskwuff]

That's assuming the private key is even reused. If they're generating a new key for each user (which they very well could be), you're boned.