That wouldn't fix it. I own the key. I set the owner of the key to you. You now own the key that I have on my machine. I commit to your repo. I'm sure the

That wouldn't fix it. I own the key. I set the owner of the key to you. You now own the key that I have on my machine. I commit to your repo. I'm sure the github team has authorization at a model level, preventing access to other user's resources. This wasn't an instance of accessing another user's resources via rails, it was assigning your own resources to another user, then abusing that fact via git.