Provenance is supposed to note from where it comes from, i.e. with something from the server/provider, not with the pubkey it's using to encrypt the message.