public GPG key should be verified before using it

Change-Id: I0571d3cffd907afe31c485990987ea44c2d4410e
Merge "public GPG key should be verified before using it"