Sigh...
It's legit and probably works up to 5.5.0. Could be using the same bug I found, could be using another one. Guess my work is moot now. Congratulations @plutoo, @smealum and @naehrwert.
Should be matter of time until the keys are out and the exploit afterwards.
I'm moving on then. See ya.