dont include --sign-key when restoring w/ hidden-enc key