Trust In Proof Assistants : Opportunities And Limitations