get pub key via signed profile, not key list