The difference here though, is that the private key is not being sent verbatim to the server.