it would appear that openbsd's signify has the same issue. the arguments "pubkey" and "seckey" are actually pubkeyfile and seckeyfile, paths to the pubkey and seckey on disk, not the actual pubkey or seckey.