[cwkoss]

Appliances that ever need to grant privileged access to an external party (ex. manufacturer webserver or support) should have a physical switch for disabling that capability.