If only one root cert has the qual flag set in the trustlist.txt, gpgsm may wrongly propagate thus flag to other root certs, as well. A workaround is the use of --compatibility-flags no-keyinfo-cache.