Don't always fetch the GnuPG key.

[bkram]

Getting the gpg takes a lot of time, and seems not needed when it is already in our GnuPG keyring.

[rugk]

You might also check whether the PGP key is expired and fetch it anyway in this case as the verification would otherwise fail.