Yes the developer key is subject to the same opsec as the Google Play or GitHub credentials.