This is great. It seems dodgey that any client like a client to play chess would require your private key. I guess a extension could just sign all messages in a web app