Evaulate the security risks and possible XSS factors. - First if someone encrypt a JS script and the decrypt side executes the JS which exposes the private key.