[razighter777]

How about just allowing key enrollment with a physical button?

[kogepathic]

This is very much not an option on most embedded devices. They allow one key to be burned once.

IIRC, a certain Marvell SoC datasheet says multiple key slots are supported, but the boot ROM only supports reading the first entry (so really, only one key is supported).

[nullpoint420]

Unless it becomes a law, and the hardware makers adapt.