You need to ensure that users from the nwtraders.com forest can access AD RMS protected content in the contoso.com forest
You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC)
You need to ensure that the domain controllers in the branch offices only replicate to the domain controller in the main office