The main repo is getting two keys, just like described in
#108 . However, repos that are "secondary", see only one key added. This is problematic for the users as the authorized_key is read in order, and if the key that isn't allowed login ends up first in that file, the user is denied access to all "secondary" repos.
I will post a workaround soonish (that will be so dirty that dirt itself will fell insulted by it).