Getting _a_ signing key is not equal to having access to SolarWind's signing key. It is interesting because it shows the extent of the breach.