install keys for package sources along with package list
enforce the fqdn of the target host