pub static kSecMatchTrustedOnly: CFStringRef