1. fixes the signing failure, to provide a reason, (useful in debugging too), 2.  makes encryption pick the best key.  this is going to go away however