It's amazing what you can learn if you read the help associated with the option. The UI CLEARLY tells you what the "T" is for, to bypass any rate limiting, etc (it's trusted).
Now back to your question, I'm curious as well. I've whitelisted only the CF IP addresses (including IPv6) and...