Added TR=1 sync-only receiver verification

This implies that if the DOT for the last hop is not already loaded
then messages will be marked untrusted. This is okay, just remember
to add the app->domain-authority DOT to the cache dir manually