pass cloud image keyring to read_signed