Require secret key only for signing key

The secret key is not needed for encryption. Not requiring a secret key
for encryption allows selecting a key where the secret key is stored
on a different computer.