Great to see more developers are using their own signing keys instead of zap.store 's bootstrap signatures -- this is the way.