pacman-key: verify TRUST_ULTIMATE keys as good