The primary signature is not signed with a key derived from the encrypted key. The binding's token parameter '{0}' requires ...