(maint) ensure you use the key file to sign