Both are not needed. Setting trustkeysfrom to either of ```$(acl)``` or ```0.0.0.0/0``` should have the exact same effect, if not then it's a bug.