Allow unauthenticated access to GPG keys [Follow up of #17569]

The following discussion from !22899 (merged) should be addressed: