code: func (p Platform) Trust(root *x509.Certificate) bool {
  	// the key store is empty iff the platform doesn't carry a root store and trust whatever root store
  	// is supplied. An example is Chrome. Such platforms should not show up in the untrusted platform
  	// list. So always return true here. Also this won't hurt ubiquity scoring because such platforms give
  	// no differentiation on root cert selection.
  	if len(p.KeyStore) == 0 {
  		return true
  	}
  
  	return p.KeyStore.Lookup(root)
  }
docs: // Trust returns whether the platform has the root cert in the trusted store.