Split off the HTTP handler into its own file.
Load the private key only once.