So what's the rationale behind using a private API instead of saving the expected pubkey wrapped along with the privkey?