Yeah giving a third party the ability to control what ssh keys get provisioned on a machine isn't a big deal.</sarcasm>