gpg: Do not honour keyserver URLs

This avoids pulling from an insecure keyserver.