code: public static boolean isRealmInboundTrusted(String inboundRealm, String localRealm) {
          WSSecurityService ss = wsSecurityServiceRef.getService();
          if (ss == null) {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
                  Tr.debug(tc, "No WSSecurityService, returning true");
              }
              return true;
          } else {
              return ss.isRealmInboundTrusted(inboundRealm, localRealm);
          }
      }
docs: Determine if the inbound realm is one of the trusted realms of the
  specified local realm. If the local realm is null the realm of the
  current active user registry will be used.
  
  @param inboundRealm
  @param localRealm
  @return true - inbound realm is trusted, false - inbound reamn is not trusted