Yeah, that was a shame. I'm not aware of any client-side key leaks yet, it seems like we've managed to avoid bad faith actors so far.