I can understand you concerns but if someone has your private posting key all they can do is post, not transfer money or anything. I guess the worst case scenario is they could make some crazy posts on your blog but you could immediately regenerate new keys and lock them out. Posting key is a pretty small risk.