Add support for --force-check-gpg (Closes: #661501, #733179, #775454).

With this option, one can programmatically make sure keyring checks are
used and that no fallback to an https mirror happens.