When reading IPGP entries the processing fails with "public key not found".
Based on my debugging the issue is that gpg_dirmngr_dns_cert always returns an r_key stream, which causes the caller to assume a key was returned (i.e., that a PGP entry was found), but that it has no valid key.
I added a patch that seems to fix this for me, though not sure it's the right use of the estream.