return try self.service(try resolveContext(apiKey)).keyResolve(ResolveKey.Request.with { builder in
      // we support SHA1 and MD5 here, for now
      switch algorithm {
      case .sha1: builder.sha1 = subject
      case .md5: builder.md5 = subject