Is it to simple to say that treat the private key as your password? Don't share it with anyone etc.