add a real signing key under /etc