Comment 4 for bug 628414

The first thing I thought of was to create a new chroot file for each test-rebuild, which I think was a decent solution, but since you mention PPAs, I think it would make more sense to import all needed APT GPG keys from the keyserver to the librarian whenever archive setup changes, and pull the key bundle from librarian in the buildd code (aka use librarian as key cache).