That's ridiculous. There are plenty of ways to lose a private key that doesn't involve or lead to compromise. I generate and store my private keys in my secure

That's ridiculous. There are plenty of ways to lose a private key that doesn't involve or lead to compromise. I generate and store my private keys in my secure CA environment and copy them to the server. If I ever need to redeploy them or generate a new CSR (SHA-2 anyone?), I can do it without ever logging into the server.