adding tarsnap

tarnsap
I think you meant `your friend` owns the private key instead of `Cryptocat`.