Fuck you bitbucket! I win this round!
Some fucker listed the public key for our keys as a "secured variable", so I can find out which public key the repo is using and I can't see it in outputs!
So if I add the keys to a file, then cat the file, bitbucket is clever enough to mask the key!
So I just got the repo to list all the public keys for the deployment account - and it masked the public key it was using!
FUCK YOU BITBUCKET! SPITE IS GOING TO WIN!
Also - BitBucket entirely did the right thing here - whoever setup the repo was BOONKERS