This blog post by Paul Gregory describes very well how to use the application catalog in an untrusted or cross forest ...