Plus it lets people decrypt media encrypted by that key that they might otherwise have been unable to. So we've established that a "private key" that is no lon

Plus it lets people decrypt media encrypted by that key that they might otherwise have been unable to. So we've established that a "private key" that is no longer private may still have uses to some people, it is not wholly "worthless." Do you want to revise your earlier statement about the private key in the repo in question? Is it "worthless"? Is it a security problem? Do you know what that key is being used for?