Current handling of GPG keys requires bundled certificates in actors. As we currently bundle just RHUI & RHEL keys automatically, all other distributions will not be correctly handled (e.g. CentOS Stream). In addition, the upgrade would also install GPG keys related to RHEL. In future, the solution should be made more robust to use keys per distribution and release instead.