track trusted users, mail when they change

I think we should track which users have "trusted" roles on a site and send an e-mail whenever that list changes. The e-mail could include all users in those trusted roles.

The reason to do this here rather than somewhere else (like paranoia) is that security_review has a concept of "trusted roles" and settings for it already.