".. stealing private keys on most NGINX servers is at least extremely hard and, likely, impossible .."

Nice!