You don't even need Trusts for this. EWS is decided by an issued certificate. The issuer can be bribed.