Insecure RSS encryption

If you're going to run Joe Gregorio's Secure RSS Syndication script for Greasemonkey, be aware that it stores the decryption key in plaintext within the script so, as it's easy for any page to see the content of scripts you're running, you have to trust Bloglines (or whatever page you run the script on) not to grab your decryption key.