That would be a win-win as long as whoever you trust with it doesn't try selling it themselves or throwing it anonymously on Pastebin or something, but you're a good judge of character so that shouldn't be a problem. Maybe consider throwing a unique identifier in the code so you can track it...