Always refresh OpenPGP keys before starting the verification process.
This ensures that the key has not been revoked, and also reduces
the risk of using an expired key.
Use string I/O for consistency with the API Manifests use where we
expect to work on cleartext anyway. Bytes are now used only for loading
keys which can be in binary format.