Deploying components of System Center Orchestrator in different domains/forests without trusts

Hi, is it possible to deploy components of System Center Orchestrator in different domains/forests without trusts between them by doing some extra configuration steps? I have 3 forests completely isolated to one another hence I would like to know if automation of service requests (Web Front End app using Orchestrator Web Service to pass input parameters to Orchestrator Runbook) can work at all in environments like this. Service account Web Front End app IIS App Pool is running under must be an Orchestrator Admin and obviously in absence of trust that cannot be set up, so I am thinking of potentially placing some SCO components in the same forest/domain where Web Front End app instance is hosted whereas having some other components in untrusted forests - awful design but that is a price of not having forest trusts in place.