hard code best requires trust level > 0, make it configurable later