I guess the same question about using private members applies here. May be we should move this login to SJCL (fingerprint+key construction)?