Thanks for bringing up the non-techie example. Another bummer with the user generating keys, you can't validate a passphrase was used (or that a good one was used) when you just get a public key.