Disable repositories with rejected GPG keys during installation

* Fixes bnc#723019 and bnc#886572
* The included test case is pretty basic (not to say dumb or useless) but I did A LOT of monkey testing to verify that works as expected.
This actually confuses people quite a lot ... what about `Mode.inst_sys` to be alias to `Stage.initial`? Too heretic :)?