added note about using secretkey w/o stored signatures