hybrid trust mode