[dboreham]

Attacker might have MITMed the console.

[Arrowmaster]

If they MITMed the console then they have probably MITMed the entire deployment process and now have the one time use key already.