remove GPG keys, tell users to go to keyserver