I use a measly four-five packages from the AUR, whose repos I clone with git. In order to then makepkg the repo, I first add the validpgpkeys from the PKGBUILD file by gpg --recv-keys [key] it. This way, makepkg doesn’t complain about the lack of valid keys.