updates instructions - archive

README.md

@@ -117,7 +117,10 @@ Note: `secrets.yaml` is just an example; the file can have any name
 To mark a key as expired, move it to the `archive/` dir as follows:
 
 ```bash
-mv ${keyname} "archive/${keyname}_$(date '+%Y-%m-%d').archive"
+# remove from groups
+find groups -name ${keyname} | xargs git rm
+# archive key - DO NOT delete - need this for auditing
+git mv ${keyname} "archive/${keyname}_$(date '+%Y-%m-%d').archive"
 ```
 
 # Advanced

groups/devnso-adp-argocd/test.person@netgo.de.gpg.pub

@@ -1 +0,0 @@
-../../test.person@netgo.de.gpg.pub