Depends on how much they care. They can take down repos containing any keys, or use heuristics to block clients.

Technically no, but they can just ban you. It would not be impossible to detect.