Registered public keys in form of account-key assertions for key IDs specified with the --key option. Make sure to include the keys used for signing client device serial and model assertions. These keys have to be registered using snapcraft register-key command prior to the export, by the brand account.