bakery: modify public keys in place

This allows a PublicKeyRing to be updated without growing indefinitely.

Also update the license to LGPL (with static linking exception) to conform
with company guidelines.