[lxgr]

Hopefully the attestation (root) key is itself stored in secure hardware (i.e. an HSM or similar) that can't be reprogrammed unilaterally, even by a privileged actor.