Should also include default, just in case that the user doesn't set `trustForwarded` in config. This will make it easier for backward compatibility and won't bother people who don't need it.