add trusted key store

Similar to above comment, just remove `StoreTrustedKey*Root` functions.