its up to you to make sure you have that information, basically without him being able to verify if your a customer theres nothing stopping you or anyone else from taking over someone elses keys.