Support blind key rotation in HTTP Signatures (#658)