Preserving Trust Across Multiple Sessions in Open Systems