track, display, and respond to trust requests

no interface to create them yet, though