I was under the impression that using an extension kept my private key from the clients I use. Why is it that I am able to see my private key when I set a breakpoint in nostrudel?