Why couldn't an administrator change the direction of trust from two-way to one-way: incoming in the general tab of an active directory trust's property dialog box?