Fix temporary repositories still checking the GPG signature
of CHECKSUMS.md5 even if no GPG key exists.