KEYS: asymmetric: enforce SM2 signature use pkey algo