The primary signature is not signed with a derived key. The binding's primary token parameter '{0}' requires key derivation. ...