Hum... Can the private key be hosted on Amber?

The code literally checks if the account has a private key and hides that option if it doesn't. That is the same check that will say the Account is Read-only when you try to post or like.

So, if you are posting with that account and Amethyst doesn't have the key, can Amber be replying back to you with a signed event?