Create an extension of the type trusted. Create mailbox for extension and put this vm box as a key on the phones. As I assume you are using embedded vm, create a name tag hunt group that is *(extension from above) and forward it always to vm.
Route the second ring group to this name tag group.