A little bit of a nitpick, but maybe we shouldn't generate and deliver a signature to the client if there are no previews. Maybe it's better to not give someone a temporary key if it's not applicable?