I store the private keyfile outside of Dropbox. To me it's a very acceptable tradeoff.