Always throw out invalid uids, but only check for marginal or full status if we're in --trust mode.  #28