RE: "trust management" vs. "certified identity"