A class to cache trusted keys
Always use local trust anchors and ignore the root.
Always use the root and ignore local trust anchors.
Use local trust anchors if available, otherwise use root.
Use the root if successful, otherwise try local anchors.