make TPB_TRUSTED_USERS optional