commit gpg keys into the repo (it sometimes timeout)
trust the keys ultimately

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>