I have a crazy idea I haven't seen here yet. Folks are already using Salsa to authenticate themselves and log in to nm.debian.org, so why not just allow importing key(s) from Salsa? You can find my current key and a long obsolete key at https://salsa.debian.org/jscott.gpg and this URL convention works for getting the key for anybody.
signature.asc
Description: This is a digitally signed message part
Description: S/MIME cryptographic signature
