Set up your two security keys. Each one makes a signing key that never leaves it. After this, you approve each Pebble Server release with your PIN and one touch.
Keep the backup key in a safe place, away from the main key. Never share the PIN. Hosted OPS adds these two public keys to Pebble Server. Nothing secret is stored on this page.