On the topic of making trust attestations private:
There are scenarios where trust attestations MUST be private.
There are scenarios where they MUST be public. Specifically: if we want to harness the power of transitive trust. Which we def need to do.
So both options must be available.
The only question is which option to provide first. I propose public attestations first, so that we can harness transitivity.