added ability to enable PKI sigining