The signing_key errors used bare phrasing while every other validation error follows the 'config key %q' convention; align them. The secret value itself is still never echoed.