sdw-admin validates config when there is only a public key

[lilyannehall]

• I have searched for duplicates or related issues

Description

Running sdw-admin --validate and sdw-admin --apply both erroneously succeed when the sd-journalist.sec does not contain the private key.

Steps to Reproduce

Set up the workstation and copying the submission key as referenced in the docs.

qvm-run --pass-io vault \
  "gpg --homedir /run/media/user/TailsData/gnupg --export-secret-keys --armor <SVSFingerprint>" \
  > /tmp/sd-journalist.sec

• Do not include the private key for the submission key - only the public key.
• Running sdw-admin --validate will correctly validate the configuration.
• Running sdw-admin --apply will succeed in setup.

Expected Behavior

Both sdw-admin --validate and sdw-admin --apply should fail.

Actual Behavior

Workstation sets up successfully, but no messages are able to be decrypted.

Comments

Ensure that there is a private key contained insd-journalist.sec during config validation.