i imagine all of the token signing keys are managed within the docker container image for supertokens?