how does entrust work