BTW qemu WILL expose key in the cmdline so if we care about so-called OpenStack security we must use key with lower than admin privileges for VM operations. In real world nobody will explore such vuln in the wild because shell access to the any node in the env gives a plenty of other possibilities to raise itself in mean of privileges.