[Zigurd]

While "permanent" covers one aspect of this requirement, I would add that "You can't or shouldn't trust a database to an otherwise trusted authority."