Initial approach to running an upgrade, which basically gets past one stupid issue where the trust files already exist.
This is likely not going to be how we exactly test. We'll probably want to run some before and after verifications, for example, to modify configuration and ensure it isn't touched during upgrades. But it's a starting point for further work.