the client doesn't know about the id, so we need to use the public key