aha, there's a browser extension for signing stuff with your privkey on behalf of web clients.