Update docs to mention that a key must have ultimate trust