Two catch of using "github.com" private/public key stuff:
- Instead of to use hardware PKCS #11 tokens or smart card to store private keys but use file system to store private keys which is very unsecure.
- Not utilize PKI (public key infrastructure) which allow single sign on with out pre-binding public key with "github.com".