A caller URI resolves to several registered identities with distinct signing keys; a pair-encrypted invitation verifies only against the key of the device that sent it, named by its push token. Keep every looked up identity and select the one whose token matches the invitation.