Let's deal with them after we get things merged (which I'm doing right now in fact :) ).What do we do with the above?
Getting rid of them is only a problem if they were used to sign a release. If so, we need to resign such releases with valid keys before throwing them out permanently.
