Add paragraph describing difference between trusted-keys and managed-keys