Disable repositories with rejected GPG keys during installation

* Fixes bnc#723019 and bnc#886572
* The included test case is pretty basic (not to say dumb or useless) but I did A LOT of monkey testing to verify that works as expected.
I think `Stage.initial` (instead of `Mode.installation`) is better here as it also covers upgrade.