If I try to claim an account your site wants my active key. Can you not do it via Steemconnect? People should not be entering their keys into other sites really.
I've not seen a fill how-to on creating accounts. It's something I'll want to do some time. I just reserved one today and it used up most of my RC.
I'm already thinking about a better solution for the key management. SteemConnect does not store the private keys, but it uses delegated key privileges and I'm not convinced that this can be a secure solution. When I give an external account the right to use my active key privileges, it's nearly the same security risk as storing the key on an external server.
I fully understand your concerns and finding a secure solution is one of my top priorities currently. Using SteemConnect would be the easiest way for me and many people use it, but as I mentioned, there are reasons why I don't want to implement it in my tool.