I just took a look at upgrading blead's CPAN.pm to 1.94_51.
The new auto-gpg-key-import code in the Makefile.PL probably shouldn't
be happening just because someone builds or tests perl on a host.
Really, key import shouldn't be happening without prompting or
confirmation.
(There's another issue that core moves those files around. But I'm going
to try to undo that)