Add a missing check for dealing with a one-way trust in query_user().