[blueskin_]

Default still implies it can be disabled. As it is, I'd guess it wouldn't be that hard to store the TTS somewhere unencrypted and load that first, perhaps as part of the bootloader.