Support for loading signin key from metadata.
- Changed all signature validation methods to use a bare key instead of entire certificate because
  that's what we get from the metadata.