Description:

When trying to install `confuse` package (an indirect dependency of `mplayer`), the signature of one of the trusted users is "marginal trust":

```
$ pacman -S --asdeps confuse

(...)

Packages (1) confuse-3.3-2

(...)

error: confuse: signature from "Baptiste Jonglez" <baptiste@bitsofnetworks.org> is marginal trust
:: File /var/cache/pacman/pkg/confuse-3.3-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
```

Before that, to ensure I have an up-to-date list of keys, I executed:

```
$ sudo pacman -Sy archlinux-keyring
$ sudo pacman-key --populate archlinux
$ sudo pacman-key --refresh-keys
```

Still, the keys are annotated as "marginal trust":

```
$ pacman-key -l | grep bitsofnetworks
uid [marginal] Baptiste Jonglez <baptiste@bitsofnetworks.org>
```