The keys are extracted from the system. The system already has the keys on it. Now if the source included those keys directly, yes it would be a problem.I can't send a link but you can clearly see in the code source that atmosphere uses private keys for example and it is clearly visible. I think the problem is more with publishing the keys to be available for everyone (that's why you can't just share your keys.txt to people) than using it