coreos-init: add new signing subkey to coreos-install