Push to many repos with a brand new key would (should) trigger red flags.
Good point. But how should the red flag materialize?