use a tmpfile for trustdb.gpg in apt-key