Using a local CP trust to support multiple Active Directory forests