[tzs]

I don't think firmware updates for routers is a good example. That seems more like the kind of situation where you should actually be using your own PKI.