Windmill leans on Xcode and its command line tools to sign, export and distribute your application without going anywhere near your private key and distribution certificate or asking you to share them.
They are yours to keep. They belong in your keychain.
Windmill installs your applications only on devices you have chosen to register under your Apple Account.
Your Apple Account Credentials are not for sharing.