pub const kSecTrustSettingsDomainAdmin: SecTrustSettingsDomain = 1;