Move invoice signing behind KeysInterface