diff --git a/update-keys b/update-keys
index ce75f2b1c92121d4f62784ca19d0f19dbaf693ac..4a86a7c6b45f604245e4ee8b1fc5f7247967c489 100755
--- a/update-keys
+++ b/update-keys
@@ -75,7 +75,8 @@ while read -ra data; do
 	keyid="${data[0]}"
 	username="${data[@]:1}"
 	if ! "${GPG[@]}" --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
-		echo "key is not fully trusted: ${keyid} ${username}"
+		echo "WARNING: key is not fully trusted: ${keyid} ${username}"
+		"${GPG[@]}" --comment "marginal trust: ${username} (${keyid})" --export ${keyid} >> packager/${username}.asc
 	else
 		"${GPG[@]}" --comment "packager: ${username} (${keyid})" --export ${keyid} >> packager/${username}.asc
 	fi