# needs long keyID, obtained with gpg --list-key --with-colons
trusted-key 5431BDE2C8F0B2F4