`gpgkey` in `repo.yaml` currently does not support pointing it to a local file. It would be more secure and, in the case of Fedora, convenient to be able to point it to a file stored in the repository.