Use a new 4096 bit RSA public key for update signing