Dunno why your configuration build a 16203 when using -t glitch (makes zero sense!!!) but... for trinity it makes no difference if you select -t glitch or -t glitch2 as both have the same output for trinity...
about the cba_9188 1bl rsa key thingy doesn't matter, it's a security thing that was added, it's not required for building images, but if you're not sure that the data is actually untouched, then it's useful to have
About 1bl key... it's always been that way in the standard configuration, to make it legal to release, that is also why there is no bootloaders included etc... (they contain copyrighted code!)