Exposing shared public keys creates an information leak; it allows attackers to probe for valid and usable username&#x2F;key combinations on your servers (and thereby discover valid usernames). This may be a trivial information leak or it may be one that you consider important; it depends on the situation.<p>Not sharing public keys between different services and contexts (eg not using your Github keys for anything else) mitigates this risk significantly.