I also have this problem and, unfortunately did not find this bug report earlier and opened a duplicate in #940181. As noted there, I believe the issue can be fixed by setting CONFIG_SECONDARY_TRUSTED_KEYRING=y in the kernel config.