One threat model with that kind of approach is that once a visitor possesses your key -- even if they return it -- you can't tell how many copies they may have made.