Reproducing testcase for apt_key bug

.gitignore

/.vagrant
/log
*.retry

ansible.cfg

[defaults]
inventory = ./.vagrant/provisioners/ansible/inventory
log_path = ./log
nocows=1

gathering = smart
var_compression_level = 9

[ssh_connection]
pipelining = True
ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s

deb.torproject.org-keyring.gpg

test.yml

---
- hosts: default
  become: yes
  pre_tasks:
    - name: Setup a pre-existing keyring
      copy:
        src: deb.torproject.org-keyring.gpg
        dest: /etc/apt/trusted.gpg.d/

  tasks:
    - # This is the buggy call:
      #  it will fail to update deb.torproject.org-keyring.gpg even though
      #  tor.asc contains a new signing subkey for the reposirory key.
      apt_key:
        data: "{{ lookup('file', 'tor.asc') }}"
        id: A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
        keyring: /etc/apt/trusted.gpg.d/deb.torproject.org-keyring.gpg
    
    - # Setup the repote repository
      # Fails due to the previous task failing to update the keyring
      apt_repository:
        repo: deb https://deb.torproject.org/torproject.org stretch main
        state: present
        filename: tor

    - # Now, apt update fails
      apt:
        update_cache: yes

tor.asc

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=Kjcs
-----END PGP PUBLIC KEY BLOCK-----

Vagrantfile

Vagrant.configure("2") do |config|
  config.vm.box = "debian/contrib-testing64"
  config.ssh.insert_key = false

  config.vm.provision "ansible" do |ansible|
    ansible.playbook = "test.yml"
  end
end