build: Fix encryption of installers

The code assumed an empty gpg configuration, this is often not the
case. Thus --no-options is required. Also support several customer
keys.