Landing submissions use the publishable key; dropped the service-role dependency.