Mention that PUBKEY is a path not a string.
Refuse to create repo if it cannot be checked.