whatever the anwer to above comment is, should we then also have a "verify" subcommand ? Have to read the rest, but should not "trust" be no-op (or print a warning) if notebook already trusted ?