pull down to refresh

not verifying online will always require trust.