diff --git a/app/Foliage/CmdBuild.hs b/app/Foliage/CmdBuild.hs
index 067895a..832495c 100644
--- a/app/Foliage/CmdBuild.hs
+++ b/app/Foliage/CmdBuild.hs
@@ -68,8 +68,11 @@ buildAction
       SignOptsSignWithKeys keysPath -> do
         ks <- doesDirectoryExist keysPath
         unless ks $ do
-          putWarn $ "You don't seem to have created a set of TUF keys. I will create one in " <> keysPath
-          liftIO $ createKeys keysPath
+          putError $ unwords
+            [ "I cannot find a set of TUF keys in " <> keysPath <> ","
+            , "Use the create-keys command to create them."
+            ]
+          fail "Keys not found"
         return $ \name -> readKeysAt (keysPath </> name)
       SignOptsDon'tSign ->
         return $ const $ return []
diff --git a/app/Foliage/Options.hs b/app/Foliage/Options.hs
index 285edee..607f484 100644
--- a/app/Foliage/Options.hs
+++ b/app/Foliage/Options.hs
@@ -109,17 +109,14 @@ buildCommand =
         )
   where
     signOpts =
-      ( SignOptsSignWithKeys
-          <$> strOption
-            ( long "keys"
-                <> metavar "KEYS"
-                <> help "TUF keys location"
-                <> showDefault
-                <> value "_keys"
-            )
-      )
-        <|> ( SignOptsDon'tSign
-                <$ switch (long "no-signatures" <> help "Don't sign the repository")
+      pure SignOptsDon'tSign
+        <|> ( SignOptsSignWithKeys
+                <$> strOption
+                  ( long "sign-with-keys"
+                      <> metavar "KEYS"
+                      <> help "TUF keys location"
+                      <> value "_keys"
+                  )
             )
 
 createKeysCommand :: Parser Command