Fix the exchange key to POST /v1/apps/:app/sign