prove that incorrect pgp keycerts cannot be created