marks all secret keys as ultimately trusted, adds the signature caches, and checks the trustdb. Moved from the scripts directory.