Rather than having a single cross-functional config namespace for keys, I think it would be cleaner to have a `config.signing` namespace that has a key configuration. What do you think? That way you don't have potentially different configuration namespaces being passed to the same API (e.g., if Signing had other signing-specific configuration, you would need to init it with config.keys and config.signing).