Only the creator of a key can analyze its content, so your customer cannot use the audit facility to analyze or clone your keys.