Those two are sort of the same question however.

If this is the only thing signed with this key, then the attack surface is only people running this thing.