Correctly get pubkey from pubkeys dir
Use rackspace mirrors that *do* work for performance
Use contrib, non-free sources