Decoupled trustkeysfrom from def.acl. Reshuffled options a bit.