all tests pass now, we have a signing key to use for pubkey encryption+sig