Document no-allow-mark-trusted option