[Bug 662560] New: repo keys need to be trusted twice