This includes the task:

• Relax signature signing requirement by returning an invalid signature if no keys are ready for signing yet. This to prevent cyclic dependency issues especially during early startup phase of replication when nodes are still transitioning to secondaries and these nodes will end up blocking waiting for new keys to be read that won't be visible until these same nodes that are to become secondaries replicate them.
• enable/disable key generation during transition to primary/step down from primary of config repl set.