slightly cleaner, if CTrustedUser object set in constructor rather than passed in.