Hi!
Can you explain what is to keep a malicious player from utilizing people's private posting keys like that? I don't really feel comfortable just tossing that out and about, giving it away to anybody who asks for it. Isn't there a better, more secure way--like on Facebook, where I can grant permission to an app or service as well as revoke it later? I am uncertain how I would be able to revoke permission to your app once I've given it the master keys to my account castle.