sql/rw-rsa and sql/rw-rsa-keyid scenarios require the pubkey plugin