Don't worry I'm not anywhere near doing it! Seems app based clients are requiring this for log in and wondered if people who were chucking their private key around were knowledgable about what that implied.