Pass public key into apiSignature() instead of user ID