yes, thanks for noticing it.

The reason for this change is:
-when you associate the key with product, it will automatically be associated with all repositories under that product..
- on other side, if you associate key only with repo, then it will only be associated with that repo,  not with the product.