aedist -r should check for trojan presence after aecpu.
In this way potential trojan *already* in the baseline should not stop the change.