[sudosysgen]

You have to make the construction process transparent and verifiable enough and then these issues can be removed. It's not a given, but it certainly is doable.