I think a CD key tied to an account is hardly new.

Change the password of the steam account, that way he can't change it on you and have you lose access to empire. Change password and email of it.