The Update Pilot client plugin uses the official WP core UpdateURI feature for plugin and theme updates from external sources. Can you think of a reason why the plugins and themes from the same vendor (as identified by the UpdateURI hostname) should have seperate fields for product update keys?