The thing that I find particularly notable here is not that they stuck the key on GitHub, but that they are trying to subpoena GitHub for a list of everyone who accessed the gists in question. If allowed to do that, then that sets a precedent that's worth considering...