def METHOD_NAME(host):
    """
    Ensure the SecureDrop Application GPG public key file is present.
    This is a test-only pubkey provided in the repository strictly for testing.
    """
    pubkey_file = host.file(f"{securedrop_test_vars.securedrop_data}/test_journalist_key.pub")
    # sudo is only necessary when testing against app hosts, since the
    # permissions are tighter. Let's elevate privileges so we're sure
    # we can read the correct file attributes and test them.
    with host.sudo():
        assert pubkey_file.is_file
        assert pubkey_file.user == "root"
        assert pubkey_file.group == "root"
        assert pubkey_file.mode == 0o644
    # Let's make sure the corresponding fingerprint is specified
    # in the SecureDrop app configuration.
    securedrop_config = host.file(f"{securedrop_test_vars.securedrop_code}/config.py")
    with host.sudo():
        assert securedrop_config.is_file
        assert securedrop_config.user == securedrop_test_vars.securedrop_code_owner
        assert securedrop_config.group == securedrop_test_vars.securedrop_user
        assert securedrop_config.mode == 0o640
        assert securedrop_config.contains(
            "^JOURNALIST_KEY = '65A1B5FF195B56353CC63DFFCC40EF1228271441'$"
        )