Function new_signing_key 

pub fn new_signing_key() -> Result<String>

Names the key by its position only; the key itself is a secret. One new key as SOFIE_SIGNING_KEYS takes it: what openssl rand -base64 32 prints.