nssArena_Destroy(nssTrust.object.arena);
(void)nssPKIObject_Destroy(&nssTrust.object);
STAN_ChangeCertTrust(CERTCertificate *cc, CERTCertTrust *trust){    PRStatus nssrv;    NSSCertificate *c = STAN_GetNSSCertificate(cc);    nssPKIObjectInstance *instance;    NSSTrust nssTrust;    /* Set the CERTCertificate's trust */    cc->trust = trust;    /* Set the NSSCerticate's trust */    nssTrust.certificate = c;    nssTrust.object.arena = nssArena_Create();    nssTrust.object.instanceList = nssList_Create(nssTrust.object.arena,                                                   PR_FALSE);    nssTrust.object.instances = nssList_CreateIterator(                                                nssTrust.object.instanceList);    nssTrust.serverAuth = get_stan_trust(trust->sslFlags, PR_FALSE);    nssTrust.clientAuth = get_stan_trust(trust->sslFlags, PR_TRUE);    nssTrust.emailProtection = get_stan_trust(trust->emailFlags, PR_FALSE);    nssTrust.codeSigning = get_stan_trust(trust->objectSigningFlags, PR_FALSE);    instance = get_cert_instance(c);    /* maybe GetDefaultTrustToken()? */    nssrv = nssToken_ImportTrust(instance->cryptoki.token, NULL, &nssTrust,                               instance->trustDomain, instance->cryptoContext);    nssArena_Destroy(nssTrust.object.arena);    return nssrv;}