initial work on whitelist signing keys