move GPG key validation to model