Interesting #SSH detail: You only need the public key to check if a server accepts a key, thereby disclosing who has access to it.
You can download any user's public keys from GitHub or GitLab, including private instances.
https://rushter.com/blog/public-ssh-keys/
@jomo Maybe that's why they are called "public"?