I would split the first step in two:
- download the key to a disposable qube (didpVM) and verify it there, then copy it to the template (
qvm-copyor “Copy to VM”) - in the template, import it into
rpm
Does that make sense to you?
Edit: What prevents you from performing the second of the three steps?