That might actually be true, I don't quite remember...

IF it asks for any private key, it should be your private posting key, which is "ok" as long as they don't ask for your main private key... but it's been a while since I signed ud - I'd read their project description tbh... :)