one more fix for getting the right subkey in api signing