@freemo Does this cause you to also automatically trust new company keys signed by that key (but not keys signed by them in turn)?