really, this requirement to authorise every action is not only irrelevant to the common user, it's interfering with your ability to think about how to make it good for the common user. you, and hzrd14...
Most users don’t even care where their private key lives. What we should be doing is finding a balance. If it were just about interaction, there are plenty of easy ways to implement that.
1