I had heard that the list of trusted pubkeys was limiited to a small number of specific domains (though I did not hear that from a nostr.band dev tbf)