I think Bredon/Master Ash/Cinder are one person. He trusts Bredon and this could be the problem. That Cinder managed to get trusted by Kvothe through the character of Bredon.
I dont think cinder can change appearances, when they were bounty hunting the tax gold, cinder was the bandit leader revealed by the cthae but when it was actually happening kvothe mentioned he looked familiar