security authority or its agent that is trusted with respect to some security-relevant activities (in the context of a security policy)