If ``conn->trust`` is guaranteed to be true as you say, then are you not keeping the wrong branch here?