fix installation of gpg keys for RPM package verification.
Make --nogpgcheck work as expected again.

Drops the base._override_sigchecks hack. The option is propagated straight to
the repos and only CLI knows about it.