bakery: modify public keys in place

This allows a PublicKeyRing to be updated without growing indefinitely.

Also update the license to LGPL (with static linking exception) to conform
with company guidelines.

have you thought about using a map instead of a slice here?