pull archive keyring out of global trust path