Keep all private keys on the server

This prevents interception of the private keys when updating.