Sounds about right from security point of view. One thing I would take care of is making sure to optimise the performance of the application - with so many decryptions going on. How is that working out for you?