add trusted key store

Also note we only need to regenerate keymap.go when we need to add more keys for testing.