use correct url for gpgkey