validate GPG key before saving