auth: Split out fetching trusted domain into sam_get_results_trust()