mhsign: use the strongest, newest not-expired secret key