an attacker might already have stolen his keys (why only one?), because the script checksums do not match :)