[lumberjack] need for a trusted subtree was: Re: [rsyslog] Parsing the CEE payload before the trusted properties?