[Bug 662560] repo keys need to be trusted twice