add trusted key store

Well, in the (likely common) case of fetching multiple images at once, it's a little more than "one and done". But we can revisit that optimisation. You are right that locking is a slightly more pressing concern. We could explore using the locking stuff that will land as part of GC - https://github.com/coreos/rocket/pull/302