You can get the keys if you root the device and force keystore to be software backed. But that has to happen before you provision Signal and it's kinda your prerogative as the device owner.