add some documentation notes about trust being per-profile

closes #6091