needs -k since we use keys nao
fix racing when removing old gpg keys