They used to not get the key, then they "allowed" devs to share the keys with them, then they suggested/pushed for that and now, for new projects you don't even get the option to sign dev-to-client yourself.