Three domains of file trust