move private binary signing key to a common place