don't check for user if connection is trusted