The idea was also to use this to store other information from the certificate going forward. The basic idea of what is trusted is that it it is either information directly from the certificate or entirely derived from trusted, non-spoofable data (so something from the certificate combined with information on the master).

@hlindberg, thanks for remember the pre-docs. I'll take a look at those too.