Is the private key uploaded into the service at all? For a moment I thought it was, until I realized the URL was resource:// :)

Along with that, I would be interested in seeing the trust network being uploaded to an external backing service (Maybe in the same SQL database?) That way it can be hosted on Heroku!

Fantastic product. I'm going to take a real good look at it and host it myself I think. Just Heroku would have been 'easy.'