I wonder why this service is needed. It does key refreshes out-of-band.
The keys are for installing packages from the repos, the repo brings the two keyrings. Why would I ever need to refresh the keys?
Or is this a security measure for keys from the AUR?