Presumably you would trick the person into touching the key. Similar to getting someone to put their password in with a phishing attack.