iOS Question Should I use two private sign keys for two different companies?

[Sandman]

I produce an app that I publish for my own company.

Now I'm about to publish another app, but this new app is for another company. They have their own account with Apple (that I helped them create it - they didn't have an app before).

For my app in my company, I have gone through the guides and created a private sign key, certificates and all that.

But for the other company, what is best? Is it stupid to reuse the same private sign key, should I create a new one that I use for their app? Obviously I need to create new certs and all that for them, but how should I think when it comes to the sign key?


(Maybe relevant: It is not likely, but it might be possible, that they will take over the development of their app. For the time being, I'm doing updates etc for them.)

 

[Erel]

The straightforward answer is to use two different keys, though if you are not giving them the private key then it doesn't look too problematic. In iOS is it simple to replace the private key so you don't need to give them the key.