Ohh to add this: I know HPKP works with Publickeys, the only question is, if I need to sign it first or can I sign it when I need it?