Some good news was added to the updates: > The agent will never send a private key over its request channel. Instead, operations that require a private key wil

Some good news was added to the updates: > The agent will never send a private key over its request channel. Instead, operations that require a private key will be performed by the agent, and the result will be returned to the requester. This way, private keys are not exposed to clients using the agent.