Does the git lookup run before the trust check, or ignore it?