Is it possible for `trust-password` to be nil here?  If it were when entering the function, wouldn't an `IllegalArgumentException` have already been thrown by this point?