Honorbuddy Support

I recently contacted Support team by email because my keys and sessions disappeared from BuddyAuth, which is pretty annoying when I wanna kill sessions or in case I lose my key. The guy who emailed me back then asked for my HB key and I guess my first question is, are they allowed to do this? Is that normal? Call me paranoid but I dont feel like sharing my key with anybody. Even an HB employee. I told him the email registered on BuddyAuth, which obviously is the same email I payed with through Paypal and I wrote the Transaction ID too. Shouldn't that be enough? Now he emailed me back, why I didn't want to give him the key. I'm not saying he's not trustworthy, but it feels a bit scamish to me. Also if I actually had lost my key and wanted to retrieve it through BuddyAuth, I couldn't inform him about my key anyway, cause I wouldn't have it. Dunno if it's just me making a big deal out of nothing. But atleast I wanted to know if it's normal that they ask for your key, cause I feel like that would scare some people, including myself.