Add an export_signing_key script to extract the public part of signing keys when rotating them.