security (minor): In KeyChain.sign, fix the doc comment since it doesn't infer the signing identity.