Default key should no longer be the first key (which is problematic for automated provisioning) but rather should have the keyId 'default'