Minimally validate GPG key id

This is not tested and I just looked how other validators work to implement this.