"I'm hoping you did actually have a proxy in front of it and Orange just didn't catch that."

That sounds a lot more reasonable than actually having the private key on each individual server.