> This setup is localized to that repo and is entirely self-contained, i.e. you can move the repo to a different path or place it on a thumb drive to a different machine and it will work without reconfiguring.
But also:
> you can move the repo to a different path
Pretty sure this alone is a non issue.
> place it on a thumb drive to a different machine and it will work without reconfiguring.
I go back to this being terrible security. If you loose that drive someone now has your key and the ability to figure out where that key is valid for.
Not just the ability to figure it out, but the config is set to use it automatically, so you could easily figure this out on accident.
> This setup is localized to that repo and is entirely self-contained, i.e. you can move the repo to a different path or place it on a thumb drive to a different machine and it will work without reconfiguring.