trustmanager checks equality of PKs