Interesting #SSH detail: You only need the public key to check if a server accepts a key, thereby disclosing who has access to it.

You can download any user's public keys from GitHub or GitLab, including private instances.

https://rushter.com/blog/public-ssh-keys/