[LinuxBender]

The only thing I can add is that if the key was generated by automation then I or the automation tool put the JIRA number or whatever approval system was used for the project so that auditors questions can be answered.