tiny refactoring
removed trust limit for remote avatars, because it works also in medium trust