adds another cut of the pgp key ring, adds first cut of internal store so test-setups don't need to use S3