It appears this is caused by ubuntu-keyring being configured before apt in the livecd build. So apt-key update is called and the default gpg permissions are 600 for the pub keyring file.
It appears this is caused by ubuntu-keyring being configured before apt in the livecd build. So apt-key update is called and the default gpg permissions are 600 for the pub keyring file.