This is nice. Last time I checked, it also emails you when a public key is added, which is a really great feature IMO.
However, it doesn't (didn't?) email you when you change your email address. So if you want to silently add a public key, you can temporarily change the email address, add the key, and then change the email back. Of course it's not a huge concern, since you need the password anyway, but it just makes relying on this email alert slightly less reliable.
Apologies if this has been changed/fixed already. I haven't tested it recently.
Accessing the Applications section also prompted for a password when I tried over the weekend. Either there was more than just the Public Keys that required re-authentication or this was indeed around for longer than just a couple minutes.
This is a separate issue. We just added the Private Token feature on the /settings/applications page. This is essentially a password, so we wanted to make sure that it required password confirmation. This will be behind sudo mode later today hopefully.
However, it doesn't (didn't?) email you when you change your email address. So if you want to silently add a public key, you can temporarily change the email address, add the key, and then change the email back. Of course it's not a huge concern, since you need the password anyway, but it just makes relying on this email alert slightly less reliable.
Apologies if this has been changed/fixed already. I haven't tested it recently.