samlsign requires absolute path to key