One thing you could do with the shelf machine is use command
UpdateInTerminal
which should automatically take care of updating the Arch keyring before other packages.
But to enable that automatic feature, edit file
/etc/eos-script-lib-yad.conf
and set this value:
EOS_UPDATE_ARCH_KEYRING_FIRST=yes
Of course you can use this command on other machines as well. 