Problem: trust_root (8.2) has specific meaning in PKI terms that is very different from what it is being used for in OpenID. Realm is a term used in HTTP AUTH that reflects the usage. Proposal: Deprecate 'trust_root' and use 'realm'