Forest root trust flags won't overwrite child trust flags