Fixup signing with alternate key and key inclusion in recovery

Signed-off-by: Brandon McAnsh <brandonm@matricom.net>