encrypted-keys: remove trusted-keys dependency