api: make SignWithKey public