ENH: reduce dependency on external services -- fetch repository key from n.d.n instead of official pgp.mit.edu