This mainly affects the download of the bootstrap image when
running on a non-Fedora host and the initial download of the
repo and release RPMs. The container rootfs creation will then
be verified by dnf against the GPG signatures in the repos RPM.
Signed-off-by: Reto Gantenbein <reto.gantenbein@linuxmonk.ch>