Reference to http://www.cloudidentity.com/blog/2013/04/02/auto-update-of-the-signing-keys-via-metadata/