ClientPrivateKey was an obscure workaround. The design should not force a 3rd party app to know (or to believe it knows) the privateKey.