read signing key at server startup

The provisioning action reads the signing key each time: an
unnecessary step requiring error handling in the action.  Simplify
the action by reading the key at server startup and handling failure
there.