Bug 576705 - Disable pgp.trustedPublicKeys from IUs

Only stick to trusted keys defined in profile as it's not safe to import
trusted keys from installed IUs because metadata is an attack vector
(Bug 577029)

Change-Id: I3d4c97b69d7b85a8f5aceed0c50383975f7f6f6a
Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/187264
Tested-by: Equinox Bot <equinox-bot@eclipse.org>
Reviewed-by: Mickael Istria <mistria@redhat.com>
2 files changed