Don't import secret keys from WKD
When importing certificates from WKD then set the new import option "only-pubkeys" if gpg supports this option.