The problem here is not about them being copyable, it's about the "attested" keys which depend on a 3rd party.