- generalize so that gpg keyrings do not have to be in /etc/planetlab