Use SSL to fetch the GPG key

If we're going to use curl then at least over https