security: In OSXPrivateKeyStorage, implement getPublicKey.
 security (internal): In IdentityManager._makeSignatureByCertificate, revert to use the public key.