break out signature timestamp from key timestamp, allow them to be set independently.