[Chris2048]

You can always build/compile your own software, having the local 'key' is the ability to do so. I'm not sure what else is implied - how will an external service / website enforce this?

[uecker]

Via remote attestation.