Redmine#4513: check PUBKEY in PolicyHubUpdateKeys

see https://cfengine.com/dev/issues/4513