fix sub authority signing issues