s4: add createtrust tool for testing