$ cargo run -- --subject=bsatsigner1.bsky.social --key=did:key:zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9 --key-id=atsign
Resolving identity: bsatsigner1.bsky.social
Resolved DID: did:plc:xeiiry65m3wm6c4yzt5tocfv

Current DID Document:
{
  "@context": [
    "https://www.w3.org/ns/did/v1",
    "https://w3id.org/security/multikey/v1",
    "https://w3id.org/security/suites/secp256k1-2019/v1"
  ],
  "id": "did:plc:xeiiry65m3wm6c4yzt5tocfv",
  "alsoKnownAs": [
    "at://bsatsigner1.bsky.social"
  ],
  "service": [
    {
      "id": "#atproto_pds",
      "type": "AtprotoPersonalDataServer",
      "serviceEndpoint": "https://discina.us-west.host.bsky.network"
    }
  ],
  "verificationMethod": [
    {
      "type": "Multikey",
      "id": "did:plc:xeiiry65m3wm6c4yzt5tocfv#atproto",
      "controller": "did:plc:xeiiry65m3wm6c4yzt5tocfv",
      "publicKeyMultibase": "zQ3shPwX8YamSqVnPUGebaBg5g6qr2zT8cEs9uURcmwR2QwmD"
    }
  ]
}

Validating key: did:key:zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9
Key is valid (P256 or K256)
Key ID 'atsign' is available

PDS: https://discina.us-west.host.bsky.network

Creating session...
Session created for: did:plc:xeiiry65m3wm6c4yzt5tocfv

Proposed DID Document (with new key):
{
  "@context": [
    "https://www.w3.org/ns/did/v1",
    "https://w3id.org/security/multikey/v1",
    "https://w3id.org/security/suites/secp256k1-2019/v1"
  ],
  "alsoKnownAs": [
    "at://bsatsigner1.bsky.social"
  ],
  "id": "did:plc:xeiiry65m3wm6c4yzt5tocfv",
  "service": [
    {
      "id": "#atproto_pds",
      "serviceEndpoint": "https://discina.us-west.host.bsky.network",
      "type": "AtprotoPersonalDataServer"
    }
  ],
  "verificationMethod": [
    {
      "controller": "did:plc:xeiiry65m3wm6c4yzt5tocfv",
      "id": "did:plc:xeiiry65m3wm6c4yzt5tocfv#atproto",
      "publicKeyMultibase": "zQ3shPwX8YamSqVnPUGebaBg5g6qr2zT8cEs9uURcmwR2QwmD",
      "type": "Multikey"
    },
    {
      "controller": "did:plc:xeiiry65m3wm6c4yzt5tocfv",
      "id": "did:plc:xeiiry65m3wm6c4yzt5tocfv#atsign",
      "publicKeyMultibase": "zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9",
      "type": "Multikey"
    }
  ]
}

Requesting PLC operation signature...
Check your email for the confirmation token.
HTTP response 200 OKEnter the PLC signing token from email: O2YFD-K525L

Signing PLC operation...
DEBUG: verification_methods being sent: {"atproto": "zQ3shPwX8YamSqVnPUGebaBg5g6qr2zT8cEs9uURcmwR2QwmD", "atsign": "zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9"}
DEBUG: Full request JSON: {
  "token": "O2YFD-K525L",
  "verificationMethods": {
    "atproto": "zQ3shPwX8YamSqVnPUGebaBg5g6qr2zT8cEs9uURcmwR2QwmD",
    "atsign": "zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9"
  }
}
DEBUG: Response from signPlcOperation: {
  "operation": {
    "alsoKnownAs": [
      "at://bsatsigner1.bsky.social"
    ],
    "prev": "bafyreifzcceohxlg5thqxggm7m3qrnjgvygssxu5s2n33xxpkq7wc3pwrm",
    "rotationKeys": [
      "did:key:zQ3shhCGUqDKjStzuDxPkTxN6ujddP4RkEKJJouJGRRkaLGbg",
      "did:key:zQ3shpKnbdPx3g3CmPf5cRVTPe1HtSwVn5ish3wSnDPQCbLJK"
    ],
    "services": {
      "atproto_pds": {
        "endpoint": "https://discina.us-west.host.bsky.network",
        "type": "AtprotoPersonalDataServer"
      }
    },
    "sig": "SjK5B3vXQzJGE-tMbaT5J6JP3V0SddpTiktngOzkVfxiBjCCJcOh4RvO75kGC-l9cFlGAhynMLQnwLSOQjdtPg",
    "type": "plc_operation",
    "verificationMethods": {
      "atproto": "zQ3shPwX8YamSqVnPUGebaBg5g6qr2zT8cEs9uURcmwR2QwmD",
      "atsign": "zDnaeomAhjwAjkz4Z9BsYzyJKn6PT5y4NpMbDn6SnvQreBLH9"
    }
  }
}

Verifying signed operation...
Operation signature verified against rotation keys

Submitting PLC operation...
Error: PLC operation failed: InvalidRequest - Incorrect signing key - Object {"error": String("InvalidRequest"), "message": String("Incorrect signing key")}