trusted_builds for Docker