clean up how trust level was check in ma/setup, with some debug output