Refresh apt::keyring when GPG key expires

[deric]

Use Case

It's not a good practice to use GPG keys with expiration set to never.

However when GPG key from provided url expires:

apt::source { 'puppet8-release':
     location => 'http://apt.puppetlabs.com',
     repos    => 'puppet8',
     key      => {
       name   => 'puppetlabs-keyring.gpg',
       source => 'https://apt.puppetlabs.com/keyring.gpg'
     }
 }

it won't be updated as long a the keyring file exists on disk.

Describe the Solution You Would Like

apt::key allows ensure parameter to have value refreshed. It would be nice to use similar approach.

[deric]

With updated GPG key the changes gets already automatically propagated.