Use apt 'key_source' instead of template