A trust model that restricts accepted certificates or public keys to expected values for a given service.