[jcgl]

Don't get me wrong, I like secure boot and securing the boot chain more generally. Was just trying to respond on the merits here.

How would you envision the opt-in process for the unlocked second stage bootloader?