Add config option to sign remote key query responses with a separate key.