This works very well until someone knocks on your door and kindly asks you to place some javascript on your site that tells everyone's browsers to send their private keys to your server where they can be subpoenaed.