1. A client computer system comprising the following: one or more processors; system memory; one or more computer-readable storage media having stored thereon computer-executable instructions that, when executed by the one or more processors, causes the computing system to perform a method for securely filtering trust services records, the method comprising the following: an act of the client computer system receiving at least one of the following trust services records: a trust services certificate, a principal certificate, a group certificate and a trust services policy; an act of the client computer system performing a time validity check to validate the trust services record's timestamp; an act of the client computer system performing an integrity check to validate the integrity of the trust services record; and an act of the client computer system performing a signature validity check to ensure that the entity claiming to have created the trust services record is the actual creator of the trust services record.