turn off pki signature validation by default
add test for return value of failed publish