1 article, newest first.
Copying the keyring into trusted.gpg.d silences the warning. Scoping the key to the one repository that needs it is the fix apt actually wants.