adding note about key signing