The private key is added to the extension.  I removed it from Astral as there is a note that as it's a new protocol, there could be no guarantee that it could not be breached.