Look into OpenPubkey

[Starkteetje]

Describe the feature
Docker has announced that they might look into deprecating Notary in favor of OpenPubkey in the future.

Once they actually recommend using the system in production (or before that), we should have a look at the system and decide whether we want to support it. If we get to look at it before, we might even be able to give feedback