Remember kids, -[NSObject hash] has absolutely no cryptographic guarantees. Using it to decide to trust a certificate is RETARDED.

Also, fix a possible overrelease of a trustref, which might be related to #16365

Refs #16365