Allow "key" or "target" to be unspecified to skip signing/uploading