Wording: change "trusted users" for "verified users"

This is less ambiguous, as it aligns with the other uses.

Trusted might refer to something else, like the reputation project.
You can trust a user you haven't verified.

Also mention devices as this shares keys with verified devices, for when device
verification was performed without cross-signing.