Comment by throwaway290

> The public keys for that step are hardcoded into clients.

Yeah, and the private keys are shared with Roskompozor.