strip cell.trusted as a transient value

We write trust to cell.metadata.trusted now,
but used to write it to cell.trusted.
Just make sure we never get either from disk.
Merge pull request #6676 from minrk/trust-save

strip cell.trusted as a transient value