Only allow a single trust update for any given identity pair.