we need to store the keyid to be able to update the signature later in
case the missing key is added later.