crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
the key to verify against, rather than the primary key
0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
signing keys, the old key verification would start to fail.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=55