validate GPG keys by fingerprint