I realized (thanks plasma41) that while I changed to a stronger key in
January, I never updated the public key here I was using to sign
canaries after that point.