Decoupling trustkeysfrom to be its own setting

replaces https://github.com/cfengine/masterfiles/pull/201