Use wget in Vagrantfile so that we don't force a dependency on curl.
Request the TPO GPG signing key by full fingerprint in the Vagrantfile.