Merge "KeyMint VTS: cope with ATTEST_KEY +/- SIGN" into tm-dev