You can add an OpenPGP repository key, even though that apt-key is deprecated