set correct perms on signing key