Always refresh OpenPGP keys before starting the verification process.
This ensures that the key has not been revoked, and also reduces
the risk of using an expired key.
Top-level Manifest compression is now forbidden by the specification for
security reasons. Therefore, modify the algorithm in the default profile
to prevent that.
A compressed top-level Manifest can still be created explicitly
via the API, or using a custom profile.
