I've always liked the phrase "trust but verify".