Strictly speaking that's not forward-secret anymore, as stealing the private key gives some advantage to cracking the session. The practical reason is probably

Strictly speaking that's not forward-secret anymore, as stealing the private key gives some advantage to cracking the session. The practical reason is probably that using DHE with TLS is already many times slower than (plain) RSA. This would only make it slower.