split ugly pubkey handling into separate repo_rpmdb_pubkey.c