store keys in trusted.gpg.d

This allows us to add a key without knowing its signature before hand. If you add a key with an arbitrary name, the exec will trigger over and over as it cant find it in `apt-key list`