use stored pubkey for kodex unseal