Comment 1 for bug 857472

Looking at this problem I think we should actually change the way we provide the keyring on the server and provide it
there as a signed keyring file.

I did not manage to get reliable key signature verification checks with gpg if there are multiple identical keyids in the keyring, so I think the best approach is to simplify and just provide the complete archive keyring file signed with the master-key.

I will outline a debdiff with the new approach.