The trust policy is baked into initramfs and contains certain security related files and configuration.