Wow dude, a scam within a scam. Good spotting! It's likely the user who wrote to you is also just another alt account. Indeed I'm even a bit uneasy about Steemconnect being so widespread and constantly asking you for active or owner key. I really hope no one hacks that but then again I wouldn't be surprised if someone does. I mean after all it's the most widely used and "trusted" tool on Steemit.