Large gpg keyrings slow down application performance due to automatic Web of Trust checks

[eaon]

Description

Automatic trustdb checks during gpg operations may cause those operations to run long on instances with large public keyrings, degrading application performance or in extreme cases causing page timeouts.

Steps to Reproduce

• With a fresh install, run loaddata.py often enough to generate keys for 10-20k sources
• Repeatedly generate new sources manually and observe intermittent slow response times

Comments

gpg provides the --no-auto-check-trustdb argument that skips regular trustdb checks. Ought to be the right way for us to handle this as we do not make use of the Web of Trust at all.