add explicit error for trust failure