why does this need a unique keyset ?  if it's the same hardware as Reef, just re-use the Reef keyset ?  at the very least, doing so for PreMP isn't a problem.

agreed ... I realized this as I traced the code further.

Thanks.

I think I'll need some changes to the signer to support separate key per model signing, but I'll update the design doc for that discussion.

if we need to do something diff with the keyset, then a sep one would be appropriate ... but at this time, looks like it'd just be the same