Good to know, I guess I'll write an .ssh/id_rsa harvesting worm and chuck it in a pip package tonight with a license that includes a clause requiring surrender of any machine its installed on.