DNS through a Trust

We have forest A running a Windows 2000 DNS server accepting DDNS updates. We would like to be able to have this DNS serve another Windows 2000 Forest, possibly through a trust relationship. However, we can only get the updates if we allow un-secured updates. Any suggestions?