Validate that client is trusted before allowing inverse auth sso query. Moved query trusted flag.