that the number of times someone's private key being pushed to github with claude code is not 0 is... alarming