I was reading the pull-local command docs and realized it was somewhat unclear that `--untrusted` *only* applied to local repo pulls; in other words that we always treat non-local pulls as untrusted. Tweak the docstring, and add tests that verify this explicitly. Closes: #1130 Approved by: jlebon