automatically trust new keys when refreshing opensuse repositories, fix #2752