I guess it is need, so that the IT department may revoke keys remotely.