But that private key requires a password or keyphrase to use it and I'm having trouble understanding how this could have been compromised?