Update keys with new signing subkey