Private keys held by banks: oxymoron or mouse trap?