dup: now possible to use different keys to sign and encrypt